CVE-2022-27666
HIGHLinux Kernel < 5.17 - Heap Buffer Overflow in IPsec ESP Transformation
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2022-27666. PoCs published by plummm, Albocoder, ngtuonghung.
AI-analyzed exploit summary This is a functional local privilege escalation (LPE) exploit for CVE-2022-27666, targeting Ubuntu Desktop 21.10 and other Linux distributions. The exploit leverages a use-after-free vulnerability in the Linux kernel's netfilter subsystem to achieve root privileges.
Description
A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and net/ipv6/esp6.c. This flaw allows a local attacker with a normal user privilege to overwrite kernel heap objects and may cause a local privilege escalation threat.
Exploits (3)
This is a functional local privilege escalation (LPE) exploit for CVE-2022-27666, targeting Ubuntu Desktop 21.10 and other Linux distributions. The exploit leverages a use-after-free vulnerability in the Linux kernel's netfilter subsystem to achieve root privileges.
This repository contains two exploitation methods for CVE-2022-27666, a Linux kernel vulnerability. The PoC leverages FUSE (Filesystem in Userspace) and message queue manipulation to achieve privilege escalation by exploiting a use-after-free or similar memory corruption flaw.
The repository contains only a README.md file with the CVE identifier and no additional technical details or exploit code. It is a placeholder with minimal content.
References (5)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H